serve-static
Ecosystem:
npm
npm
Package URL:
pkg:npm/serve-static
Total PRs:
2,227 Dependabot PRs
2,227 Dependabot PRs
Latest PR:
about 1 hour ago
about 1 hour ago
Unique Repositories:
1,839 repositories
1,839 repositories
Unique Repos (30 days):
243 repositories
243 repositories
Security Advisories
Open Redirect in serve-static
GHSA-c3x7-gjmx-r2ff
CVE-2015-1164
LOW
published about 5 years ago
• updated about 1 month ago
Versions of `serve-static` prior to 1.6.5 ( or 1.7.x prior to 1.7.2 ) are affected by an open redirect vulnerability on some browsers when configur...
serve-static vulnerable to template injection that can lead to XSS
GHSA-cm22-4g7w-348p
CVE-2024-43800
LOW
published about 1 year ago
• updated about 1 month ago
### Impact
passing untrusted user input - even after sanitizing it - to `redirect()` may execute untrusted code
### Patches
this issue is patche...
Recent PRs (filtered by: Patch PRs )
Bump send and serve-static
future-architect/future-architect.github.io #1592
1.16.0 → 1.16.2
Patch PR
Merged
22 days ago
Package Details
| Name: | serve-static |
| Ecosystem: | npm |
| PURL Type: | npm |
| Package URL: | pkg:npm/serve-static |
| JSON API: | View JSON |
Security Advisories
Package Information
Description:
Serve static files
| Repository: | https://github.com/expressjs/serve-static |
| Homepage: | https://github.com/expressjs/serve-static#readme |
| Latest Release: |
2.2.0
6 months ago |
| Dependent Repos: | 4,975,561 |
| Dependent Packages: | 5,768 |
| Downloads: | 166,108,478 |
| Ranking: | Top 0.0003% by dependent repos Top 0.0102% by downloads Top 0.0158% by dependent pkgs |